Privacy Policy Last updated: 10 August 2026
This Privacy Policy explains how Endeavour 3DSecure & Digital Identity Ltd (“we”, “us”, or “our”), the company behind VeraUno, collects, uses, stores, and protects personal data when you visit our website or use the VeraUno service.
VeraUno is built on true client-side encryption. Encryption and decryption happen on the user’s device. We never have access to the plaintext content of your encrypted emails or to your private keys.
1. Data Controller
Endeavour 3DSecure & Digital Identity Ltd Email: privacy@verauno.com Enterprise: enterprise@verauno.com Security: security@verauno.com
2. What Personal Data We Collect
Website visitors
- Technical data automatically collected by our servers (IP address, browser type and version, device type, operating system, referring URL, pages visited, timestamps, and approximate location derived from IP).
- Cookie and similar technology data (see section 7).
Account creation / free trial / enterprise inquiries
- Email address (required)
- Full name (if provided)
- Password (stored only in hashed form; we cannot recover it)
- Company name, role, company size (for enterprise requests)
- Any other information you voluntarily submit in forms or support requests
When you use the VeraUno service
- Account and authentication data
- Metadata necessary to operate the service (sender/recipient addresses, timestamps, message size, delivery status, technical logs)
- We cannot access the content of client-side encrypted emails. We do not even see the encrypted email. Only the ability to decrypt the decryption key for an email resides on our servers.
Security, fraud detection and anti-abuse data In the context of protecting our service, users, infrastructure and intellectual property, we collect and process all data reasonably available to us that is relevant for detecting, investigating, preventing and, where appropriate, prosecuting:
- fraud and abusive activity
- malicious use of our services or infrastructure
- tampering
- reverse engineering
- intellectual property theft
- any other misuse of our systems or proprietary technology
This may include technical logs, connection data, usage patterns, IP addresses, device and browser information, account activity, and related metadata.
When you contact us
- Name, email address, and the content of your message
We do not intentionally collect special categories of personal data unless you choose to include such information in communications with us.
3. How and Why We Use Your Data
| Purpose | Legal basis |
|---|---|
| Provide and operate the VeraUno service, create and manage accounts | Performance of a contract |
| Process sales, support, and enterprise inquiries | Contract / Legitimate interests |
| Secure the service, detect, prevent and investigate fraud, abuse, malicious activity, tampering, reverse engineering, intellectual property theft or any misuse of our services, infrastructure or proprietary technology, and where necessary assist with prosecution | Legitimate interests and legal obligations |
| Respond to your inquiries | Legitimate interests or contract |
| Send essential service communications (account notices, security alerts) | Contract / Legitimate interests |
| Send marketing or product updates | Consent only (you can withdraw at any time) |
| Comply with legal obligations | Legal obligation |
| Improve the website and service (preferably using aggregated or anonymised data) | Legitimate interests |
We do not use the content of encrypted emails for advertising, profiling, AI training, or any other purpose — nor do we have no technical ability to access it.
Fair use and anti-misuse We strongly discourage any misuse of our services or infrastructure. This includes, without limitation, fraud, malicious activity, tampering, reverse engineering, and intellectual property theft. Attempts to engage in such conduct are likely to result in account suspension or termination, preservation of relevant data, and cooperation with law enforcement or other authorities where appropriate. Such activity can lead to serious legal consequences for the individuals involved.
4. Zero-Knowledge Design
VeraUno uses true client-side encryption (AES-256).
- Messages are encrypted on your device before they leave it.
- Only the intended recipient holding the corresponding private key can decrypt them.
- Our servers store and transmit only encryption keys.
- We have no ability to access, read, or decrypt your encrypted email content.
5. Sharing of Data
We do not sell personal data. We share data only with:
- Carefully selected service providers that help us operate the website and service (hosting, infrastructure, email delivery for notifications, etc.), under appropriate contracts
- Professional advisors or authorities when required by law or when necessary to protect our rights, users, intellectual property or the public (including in cases of fraud, abuse, tampering, reverse engineering or intellectual property theft)
- In the event of a corporate transaction (merger, acquisition, etc.), subject to appropriate safeguards
Any processors are required to protect the data and use it only for the purposes we specify.
6. International Transfers
If we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses or equivalent mechanisms) so that your data remains protected.
7. Cookies and Similar Technologies
We use cookies and similar technologies that are necessary for the website to function. Where we use non-essential cookies (for analytics or similar purposes), we will request your consent. You can manage cookie preferences through your browser settings. More details may be provided in a separate Cookie Notice if needed.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Account data is retained for the duration of the account and for a reasonable period afterwards for security, legal, and operational reasons. Data collected or preserved in connection with fraud detection, abuse investigation, tampering, reverse engineering, intellectual property theft or legal proceedings may be retained for longer periods as necessary for those purposes. Encryption keys are retained according to the service settings and our technical retention policies (we still cannot access the plaintext).
9. Your Rights
Depending on applicable law (including the GDPR where it applies), you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Object to processing (including direct marketing)
- Data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a supervisory authority
To exercise these rights, contact us at privacy@verauno.com. We may need to verify your identity before responding. Note that rights may be limited where processing is necessary for the detection, prevention or prosecution of fraud, abuse, tampering, reverse engineering, intellectual property theft or other unlawful activity, or to protect the rights and safety of others.
10. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Because of the client-side encryption design, the content of encrypted emails is protected even from us. We actively monitor for and respond to signs of fraud, abuse, tampering, reverse engineering, intellectual property theft and other malicious use of our services and infrastructure.
11. Children’s Privacy
The service is not directed at children under 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Material changes will be highlighted where appropriate.
13. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us at: